No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Installation Guide

OceanStor 5000, 5000F, 6000, and 6000F V5 Series V500R007

This document is applicable to OceanStor 5110 V5, 5110F V5, 5300 V5, 5300F V5, 5500 V5, 5500F V5, 5600 V5, 5600F V5, 5800 V5, 5800F V5, 6800 V5, and 6800F V5 storage systems. It describes hardware installation of those storage systems for helping you easily and quickly finish the installation.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
(Optional) Configuring New IP Addresses for the Management Network Ports on the Switches and SSH Login User Information (Applicable to CE6855-48S6Q-HI switches)

(Optional) Configuring New IP Addresses for the Management Network Ports on the Switches and SSH Login User Information (Applicable to CE6855-48S6Q-HI switches)

If you want to use SmartKit to configure switches, you must change the IP addresses of the management network ports on the switches to ensure that the switches, the maintenance terminal where SmartKit resides, and the original storage system are on the same network.

Context

If you use SmartKit to configure a switch, modify the IP address of the switch's management network port to ensure that this IP address resides in the same network as the storage system.

NOTE:

Before modifying the IP address of a switch's management network port and the SSH account, run the reset saved-configuration command to reset the configuration file of the switch. In the meantime, to make the rest take effect, run the reboot fast command to restart the switch.

Procedure

  1. Use the serial port to log in to a switch.
  2. Run the system-view command to enter the system view. Run the command-privilege level rearrange command to improve command levels in batches.
  3. Run the commit command to commit the configuration.
  4. Run the aaa command to enter the AAA view.
  5. Configure the SSH login user for the switch.

    1. Run the undo local-user policy security-enhance command to delete SSH login security policies.
    2. Run the local-user username password irreversible-cipher password command to add a user.

      username is the user name and password is the user's password.

    3. Run the local-user username service-type ssh command to set the user service mode.
    4. Run the local-user username level 15 command to set the user level.

  6. Change the IP address of the management network port of the switch.

    1. Run the interface MEth0/0/0 command to enter the management network port view.
    2. Run the ip address ipaddress mask command to set the IP address.

      ipaddress is the new IP address of the management network port and mask is its subnet mask.

    3. (Optional) Run the ip route-static ipaddress mask gateway command to set the switch gateway.

      ipaddress indicates the destination network segment, mask indicates the subnet mask of the destination network segment, and gateway indicates the gateway.

    NOTE:

    If the switches, the maintenance terminal where SmartKit resides, and the original storage system are not on the same network, you must set the switch gateway. To ensure that IP addresses on all network segments can access switches, you are advised to set a default gateway; namely, set both ipaddress and mask to 0.0.0.0.

  7. Run the user-interface maximum-vty number command to change the maximum number of SSH connections.

    number is the maximum number of SSH connections and the value ranges from 0 to 21.

    NOTE:

    If SmartKit is used to configure switches, you are advised to set number to a value larger than six.

  8. Run the stelnet server enable command to enable SSH.
  9. Run the ssh authentication-type default password command to set the SSH user authentication mode to password authentication.
  10. Run the user-interface vty 0 n command to set the number of concurrent users.

    n indicates the number of concurrent users. Its value must be smaller than that set in Step 6.

  11. Run the authentication-mode aaa command to set the user authentication mode.
  12. Run the user privilege level 15 command to set the user level.
  13. Run the protocol inbound ssh command to enable the user to support SSH.
  14. Run the quit command to return to the system view.
  15. Run the rsa local-key-pair create command to generate the SSH public key for the user.
  16. Run the commit command to submit the configuration file.
  17. Run the quit command to exit the system view.
  18. Run the save command to save the configuration file.

Example

Add a user admin123 for SSH, and set a new IP address 172.31.8.54 for the management network ports on the switches to ensure that the switches, the maintenance terminal where SmartKit resides, and the original storage system are on the same network.

<HUAWEI>system-view 
Enter system view, return user view with return command. 
[~HUAWEI]command-privilege level rearrange 
Info: The command levels have been upgraded in batch ! 
Privilege note: 0-VISIT, 1-MONITOR, 10-SYSTEM, 15-MANAGE 
[~HUAWEI]aaa (Enter the AAA view.) 
[~HUAWEI-aaa]undo local-user policy security-enhance (Delete SSH login security policies.) 
Warning: The current operation may reduce the degree of account security. It is strongly recommended to keep this enabled. 
[~HUAWEI-aaa]local-user admin123 password irreversible-cipher huawei (Add a user admin123 for SSH.) 
[~HUAWEI-aaa]local-user admin123 service-type ssh (Set the user service mode.) 
[~HUAWEI-aaa]local-user admin123 level 15 (Set the user level.) 
[~HUAWEI-aaa]interface MEth0/0/0 (Enter the management network port view.) 
[~HUAWEI-MEth0/0/0]ip address 172.31.8.54 255.255.0.0 (Set a new IP address for the management network port) 
[~HUAWEI]ip route-static 0.0.0.0 0.0.0.0 172.31.0.1 (Set a default gateway.) 
[~HUAWEI]user-interface maximum-vty 21 (Change the number of SSH connections.) 
[~HUAWEI]stelnet server enable (Enable the SSH service.) 
Info: The Stelnet server is already started. 
[~HUAWEI]ssh authentication-type default password (Set the SSH user authentication mode to password authentication.) 
[~HUAWEI]user-interface vty 0 4 (Set the number of concurrent users.) 
[~HUAWEI-ui-vty0-4]authentication-mode aaa (Set the user authentication mode.) 
[~HUAWEI-ui-vty0-4]user privilege level 15 (Set the user level.) 
[~HUAWEI-ui-vty0-4]protocol inbound ssh (Enable the user to support the SSH protocol.) 
[~HUAWEI-ui-vty0-4]quit (Return to the system view.) 
[~HUAWEI]rsa local-key-pair create (Generate the SSH public key for the user.) 
The key name will be: HUAWEI_Host 
% RSA keys defined for HUAWEI_Host already exist. 
Confirm to replace them? Please select [Y/N]:y 
The range of public key size is (512 ~ 2048). 
NOTE: If the key modulus is greater than 512, 
      it will take a few minutes. 
Input the bits in the modulus [default = 2048]: 
[~HUAWEI] 
[~HUAWEI] 
[~HUAWEI]commit 
[~HUAWEI]quit 
<HUAWEI>save 
Warning: The current configuration will be written to the device. Continue? [Y/N]:y 
Now saving the current configuration to the slot 1  
Info: Save the configuration successfully.
Translation
Download
Updated: 2019-07-11

Document ID: EDOC1000181531

Views: 92746

Downloads: 857

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next